PaulDotCom mailing list archives

Re: Auditing Folder Permissions on Windows


From: Adrien de Beaupre <adriendb () gmail com>
Date: Fri, 4 Mar 2011 09:04:49 -0500

Hi Zate,

DumpACL (formerly DumpSec) will do what you are looking for:
http://www.systemtools.com/somarsoft/?somarsoft.com
http://www.systemtools.com/cgi-bin/download.pl?DumpAcl

Cheers,
Adrien

On Fri, Mar 4, 2011 at 8:18 AM, Zate <zate75 () gmail com> wrote:
So here is my issue.
I am having to basically output the ACL's (ie user/group and it's
permissions) for about 9 shares on our network.  So in the form of
\\server\place\folder
i need to know the ACL on every folder under that top one to tell if it's
changed from what it should be.
so far I've tried doing it in perl and in ruby, both run into some
limitations with the sheer number of folders or with dealing with the depth
of recursion.
tried it in Powershell, hits a limit in the length of the folder names.
Any tools out there that do this stuff?  This is kind of centered around SOX
reporting, so I am sure I am not the only one trying to do this.
Ideas?
thanks.
Zate

_______________________________________________
Pauldotcom mailing list
Pauldotcom () mail pauldotcom com
http://mail.pauldotcom.com/cgi-bin/mailman/listinfo/pauldotcom
Main Web Site: http://pauldotcom.com




-- 
Cheers,
Adrien de Beaupre
SANS Internet Storm Center Handler
---
Note: The SANS Handlers is a group of approximately 30 volunteer
incident  handlers.  You may receive responses from other individuals
on that list.  Also, please direct all communication to
handlers () sans org, so that everyone is kept "in the loop.
_______________________________________________
Pauldotcom mailing list
Pauldotcom () mail pauldotcom com
http://mail.pauldotcom.com/cgi-bin/mailman/listinfo/pauldotcom
Main Web Site: http://pauldotcom.com


Current thread: